CWE-1287 Improper Validation of Specified Type of Input
baseThe product receives input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (207)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-4879US | critical9.8OT critical | KEV | ||
ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthentica… | ||||
| CVE-2024-6298US | critical9.8 | Exploit | ||
Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series
v3.08.01
; MATRIX Series
v3.08.01 allows Attacker to execute arbitrary code remotely | ||||
| CVE-2024-51550US | critical9.8 | Exploit | ||
Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device.
Affected products:
ABB ASPECT - Enterpr… | ||||
| CVE-2022-31007US | high7.2 | Exploit | ||
eLabFTW is an electronic lab notebook manager for research teams. Prior to version 4.3.0, a vulnerability allows an authenticated user with an administrator role in a team to assig… | ||||
| CVE-2024-51546US | high7.5 | Exploit | ||
Credentials Disclosure vulnerabilities allow access to on board project back-up bundles.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Ser… | ||||
| CVE-2024-51551US | critical10.0OT elevated | — | ||
Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.
Affected products:
ABB ASPECT - Enterprise v3.07… | ||||
| CVE-2021-32024US | critical9.8 | — | ||
A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the a… | ||||
| CVE-2022-2421US | critical9.8 | — | ||
Due to improper type validation in attachment parsing the Socket.io js library, it is possible to overwrite the _placeholder object which allows an attacker to place references to… | ||||
| CVE-2026-45069US | critical9.1OT elevated | — | ||
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.12, and 8.0.12, OidcTokenHandler::verifyClaims() registered a… | ||||
| CVE-2021-43802US | high8.8 | — | ||
Etherpad is a real-time collaborative editor. In versions prior to 1.8.16, an attacker can craft an `*.etherpad` file that, when imported, might allow the attacker to gain admin pr… | ||||
| CVE-2026-96044US | high8.8 | — | ||
No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2023-29126US | high8.8 | — | ||
The Waybox Enel X web management application contains a PHP-type juggling vulnerability that may allow a brute force process and under certain conditions bypass authentication. | ||||
| CVE-2023-47726US | high8.8 | — | ||
IBM QRadar Suite Software 1.10.12.0 through 1.10.21.0 and IBM Cloud Pak for Security 1.10.12.0 through 1.10.21.0 could allow an authenticated user to execute certain arbitrary comm… | ||||
| CVE-2026-2454US | high8.6 | — | ||
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to handle incorrectly reported array lengths which allows malicious user to cause OOM errors and cr… | ||||
| CVE-2025-46342US | high8.2 | — | ||
Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.13.5 and 1.14.0, it may happen that policy rules using namespace selector(s) in… | ||||
| CVE-2022-39369US | high8.0 | — | ||
phpCAS is an authentication library that allows PHP applications to easily authenticate users via a Central Authentication Service (CAS) server. The phpCAS library uses HTTP header… | ||||
| CVE-2025-48638US | high7.8 | — | ||
In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with no additional exe… | ||||
| CVE-2024-27065US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: do not compare internal table flags on updates
Restore skipping transaction if table upd… | ||||
| CVE-2026-110857US | high7.5 | — | ||
GitPython before 3.2.0 contains a remote code execution vulnerability that allows attackers to run commands because Git.ls_remote forwards URLs without check_unsafe_protocols valid… | ||||
| CVE-2026-97801US | high7.5 | — | ||
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network. | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan